#3792: enter.c:replace_part() undefined behavior
----------------------------+----------------------
Reporter: Safari | Owner: mutt-dev
Type: defect | Status: new
Priority: major | Milestone:
Component: user interface | Version: 1.5.24
Keywords: |
----------------------------+----------------------
savelen can be 0, so savebuf is then NULL, and it does memcpy in two
places for savebuf.
to trigger: in Open mailbox prompt, tab-complete to a mailbox (e.g.,
"=recei<TAB>").
--
Ticket URL: <http://dev.mutt.org/trac/ticket/3792>
Mutt <http://www.mutt.org/>
The Mutt mail user agent